705 matches found
jq: jq: Denial of Service via deeply nested array comparison
A flaw was found in jq, a command-line JSON processor. This vulnerability allows a local user or an attacker providing malicious input to cause a denial of service DoS by comparing two sufficiently deeply nested arrays using the '==' operator. This action exhausts the C stack due to uncontrolled...
jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems
A flaw was found in jq, a command-line JSON processor. On 32-bit systems, a local attacker could exploit an integer overflow vulnerability in the jvpstringappend function. This could lead to a massive buffer overrun, resulting in a denial of service DoS condition...
jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
A flaw was found in jq, a command line JSON processor. Embedded NUL bytes in import paths are truncated during module and data-file lookup, creating a mismatch between the intended import string and the actual file path opened. This issue allows an attacker who can supply a crafted script to acce...
Oracle Linux 9 : jq (ELSA-2026-19365)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19365 advisory. - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions - Fix CVE-2026-39979 out-of-bounds read in jvparsesized Tenab...
Amazon Linux 2023 : jq, jq-devel (ALAS2023-2026-1860)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1860 advisory. jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow CVE-2026-49839 Tenable has extracted the preceding description block directly from the tested product security advisor...
Photon OS 5.0: Jq PHSA-2026-5.0-0885
An update of the jq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0885. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid321792...
Important Photon OS Security Update - PHSA-2026-5.0-0885
Updates of 'rsync', 'jq', 'util-linux' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2026-5.0-92-0885
Updates of 'jq' packages of Photon OS have been released...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.18.44 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.65 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.65 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.33 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Linux Distros Unpatched Vulnerability : CVE-2026-49839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jq is a command-line JSON processor. Prior to 1.8.2, jq --rawfile can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-boun...
Amazon Linux 2023 : jq, jq-devel (ALAS2023-2026-1815)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1815 advisory. jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating string...
Important Photon OS Security Update - PHSA-2026-5.0-90-0870
Updates of 'jq' packages of Photon OS have been released...
CVE-2026-41257 affecting package jq for versions less than 1.7.1-6
CVE-2026-41257 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...
CVE-2026-43895 affecting package jq for versions less than 1.7.1-6
CVE-2026-43895 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...
CVE-2026-44777 affecting package jq for versions less than 1.7.1-6
CVE-2026-44777 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...
CVE-2026-43896 affecting package jq for versions less than 1.7.1-6
CVE-2026-43896 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...